$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: 0SPEsUhOs2aR1ymcyNRNoJThJk0XnpxE9hnSuYrubac= Subject key identifier: C6:A7:37:A2:B3:F7:8D:F6:E4:D1:53:36:AA:D1:21:96:BD:A6:A3:55 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 083D153766772D5D1285F0EA5A989E9684105BF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 0157 Signing time: Thu 16 Apr 2026 20:50:45 +0000 Manifest this update: Thu 16 Apr 2026 20:45:45 +0000 Manifest next update: Mon 20 Apr 2026 01:30:45 +0000 Files and hashes: 1: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: VPkKq5pW4icrUWwOkyNSfwGvVjdptRStLH0drWvxYBA=) 2: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: 1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=) 3: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: Us649gKgLXgCXiwIAPzSRfT2vwc2Xrs3/JnrzSYazTY=) 4: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: TSWTtXjO6rRBGxq0GXSalwLsq/iPrwDob/vC1OJNeU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3d:15:37:66:77:2d:5d:12:85:f0:ea:5a:98:9e:96:84:10:5b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Apr 16 20:45:45 2026 GMT Not After : Apr 20 01:30:45 2026 GMT Subject: CN=C6A737A2B3F78DF6E4D15336AAD12196BDA6A355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:18:fc:19:d2:1a:20:bc:04:c5:1b:78:f9: a6:5b:40:3b:f1:b6:b1:ed:2f:f2:4d:18:e5:f2:e4: f8:5b:e9:15:93:3e:32:df:b5:ff:7e:fa:61:17:f8: 6c:df:f3:18:0d:fd:28:a4:73:f8:73:eb:e2:1f:9a: ce:4f:7e:fa:37:91:1c:68:59:9d:55:f2:95:6d:3d: 2c:2b:c2:ea:7b:22:d0:54:e7:4c:cb:6e:6c:8b:4b: 2a:b9:fd:09:fd:c7:c7:9e:8c:bd:73:c0:17:c9:e1: eb:0c:3d:11:eb:4a:ea:da:bc:42:ae:d2:7b:52:23: cc:ab:66:af:91:1b:55:17:16:6e:8d:1c:62:5f:eb: 41:1d:31:e9:0c:88:cc:b5:c3:8b:4e:79:35:aa:be: 22:07:aa:82:fa:a2:1d:8f:9a:a2:f0:63:64:17:ab: 72:a7:63:24:1d:25:73:e7:0c:88:cd:03:4d:39:df: eb:ef:1d:bc:d7:7d:32:cd:32:14:92:6a:22:62:26: 59:c8:5e:32:b6:56:df:79:08:d2:54:3d:61:b3:4b: 04:84:00:19:6b:ca:0f:df:5d:20:e2:c0:8c:06:13: 48:82:4a:1a:b5:46:e1:f3:0a:90:a5:8e:61:45:39: 65:70:4f:4f:07:ca:78:ee:bf:08:7b:e8:0b:30:7e: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A7:37:A2:B3:F7:8D:F6:E4:D1:53:36:AA:D1:21:96:BD:A6:A3:55 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:8c:00:e2:2d:ee:02:53:b6:4d:9a:30:87:14:a9:d3:d4: 5f:1b:df:b3:c8:af:e6:51:c1:5a:87:4e:5d:c9:a5:cf:f4:1f: 7b:84:04:42:6f:87:39:95:1d:cd:1f:7d:37:81:01:7e:eb:c2: 66:42:f5:2f:04:3c:a3:90:67:c5:10:af:9e:95:3c:fc:f5:50: ff:2c:75:36:3f:0c:b4:da:a1:4a:02:65:0e:77:70:61:14:c6: da:be:e4:7d:46:26:9d:d9:f4:38:0f:f2:93:7f:a3:03:6f:c5: 55:ad:37:f8:7d:50:e9:87:1c:28:a3:52:ed:41:c2:c2:65:46: 33:06:ce:fa:2c:ea:28:41:4c:f9:fc:3e:e7:6a:7a:38:86:89: 83:47:ff:f6:cd:f5:00:30:76:83:3e:1e:97:ce:97:f3:aa:a5: 89:a4:9e:65:a0:0f:dc:f3:b3:52:af:69:6a:29:da:c3:90:0a: 25:92:3c:50:11:1b:6e:b5:97:6d:4b:c9:6f:c7:fb:8b:49:a1: 75:3a:ac:5a:1c:32:c7:08:c5:c3:bd:56:c8:5e:ea:d8:1e:51: 92:fa:2f:6d:e4:0f:b7:9b:63:9d:14:1a:f8:52:92:e3:54:a5: df:c5:8c:cd:20:3d:23:7a:ea:a7:53:2e:90:af:ee:e5:66:8d: f6:4c:33:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD0VN2Z3LV0ShfDqWpieloQQW/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNjA0MTYyMDQ1NDVaFw0yNjA0MjAwMTMwNDVaMDMxMTAvBgNV BAMTKEM2QTczN0EyQjNGNzhERjZFNEQxNTMzNkFBRDEyMTk2QkRBNkEzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpBj8GdIaILwExRt4+aZbQDvx trHtL/JNGOXy5Phb6RWTPjLftf9++mEX+Gzf8xgN/Sikc/hz6+Ifms5Pfvo3kRxo WZ1V8pVtPSwrwup7ItBU50zLbmyLSyq5/Qn9x8eejL1zwBfJ4esMPRHrSuravEKu 0ntSI8yrZq+RG1UXFm6NHGJf60EdMekMiMy1w4tOeTWqviIHqoL6oh2PmqLwY2QX q3KnYyQdJXPnDIjNA0053+vvHbzXfTLNMhSSaiJiJlnIXjK2Vt95CNJUPWGzSwSE ABlryg/fXSDiwIwGE0iCShq1RuHzCpCljmFFOWVwT08Hynjuvwh76AswfrTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqc3orP3jfbk0VM2qtEhlr2mo1UwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbfjADiLe4CU7ZNmjCHFKnT1F8b37PIr+ZR wVqHTl3Jpc/0H3uEBEJvhzmVHc0ffTeBAX7rwmZC9S8EPKOQZ8UQr56VPPz1UP8s dTY/DLTaoUoCZQ53cGEUxtq+5H1GJp3Z9DgP8pN/owNvxVWtN/h9UOmHHCijUu1B wsJlRjMGzvos6ihBTPn8PudqejiGiYNH//bN9QAwdoM+HpfOl/OqpYmknmWgD9zz s1KvaWop2sOQCiWSPFARG261l21LyW/H+4tJoXU6rFocMscIxcO9Vshe6tgeUZL6 L23kD7ebY50UGvhSkuNUpd/FjM0gPSN66qdTLpCv7uVmjfZMM1I= -----END CERTIFICATE-----Generated at Fri Apr 17 21:31:56 2026 by rpki-client